JVNDB-2022-001494

Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents

Trend Micro Apex Central and Trend Micro Apex Central as a Service provided by Trend Micro Incorporated are vulnerable to improper check for file contents (CWE-345, CVE-2022-26871).

Trend Micro Incorporated states that attacks has been observed.

Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.

Trend Micro, Inc.

• Apex Central 2019 prior to Build 6016
• Apex Central as a Service prior to Build 202203

A remote attacker may upload an arbitrary file in the product. As a result, arbitrary code may be executed.

[Apply the Patch]
Apply the patch according to the information provided by the developer.
The developer has released a patch listed below that contains a fix for this vulnerability.

* Trend Micro Apex Central 2019 Patch3 (Build 6016)

The issue in Trend Micro Apex Central as a Service is fixed in the March 2022 updates.

Trend Micro, Inc.

• Trend Micro : IMPORTANT SECURITY BULLETIN: Trend Micro Apex Central Arbitrary File Upload Remote Code Execution (RCE) Vulnerability
• Trend Micro : [Alert] Apply a Critical Patch; An attack exploiting the vulnerability (CVE-2022-26871) in Trend Micro Apex Central has been observed in Japanese

1. Insufficient Verification of Data Authenticity(CWE-345) [Other]

1. CVE-2022-26871

1. JVN : JVNVU#99107357
2. National Vulnerability Database (NVD) : CVE-2022-26871
3. JPCERT REPORT : JPCERT-AT-2022-0008
4. CISA Known Exploited Vulnerabilities Catalog : CVE-2022-26871

• [2022/03/31]
    Web page was published